[java-opensaml COMMIT] /trunk/opensaml-xmlsec-impl/src/main/java/org/opensaml/xmlsec/config/DefaultSecurityConfigurat...
noreply at shibboleth.net
noreply at shibboleth.net
Fri Jan 30 16:23:31 EST 2015
Author: putmanb
Date: Fri Jan 30 16:23:31 2015
New Revision: 4205
URL: http://svn.shibboleth.net/view/java-opensaml?rev=4205&view=rev
Log:
OSJ-100: Default config for X509Credential Signature KeyInfo generation should emit cert chain in addition to entity cert
Modified:
trunk/opensaml-xmlsec-impl/src/main/java/org/opensaml/xmlsec/config/DefaultSecurityConfigurationBootstrap.java
Modified: trunk/opensaml-xmlsec-impl/src/main/java/org/opensaml/xmlsec/config/DefaultSecurityConfigurationBootstrap.java
URL: http://svn.shibboleth.net/view/java-opensaml/trunk/opensaml-xmlsec-impl/src/main/java/org/opensaml/xmlsec/config/DefaultSecurityConfigurationBootstrap.java?rev=4205&r1=4204&r2=4205&view=diff
==============================================================================
--- trunk/opensaml-xmlsec-impl/src/main/java/org/opensaml/xmlsec/config/DefaultSecurityConfigurationBootstrap.java (original)
+++ trunk/opensaml-xmlsec-impl/src/main/java/org/opensaml/xmlsec/config/DefaultSecurityConfigurationBootstrap.java Fri Jan 30 16:23:31 2015
@@ -275,6 +275,7 @@
// Generator for X509Credentials
X509KeyInfoGeneratorFactory x509Factory = new X509KeyInfoGeneratorFactory();
x509Factory.setEmitEntityCertificate(true);
+ x509Factory.setEmitEntityCertificateChain(true);
defaultManager.registerFactory(basicFactory);
defaultManager.registerFactory(x509Factory);
More information about the commits
mailing list